Question on PAC and principal APIs project
Nicolas.Williams at sun.com
Tue Feb 10 21:24:44 EST 2009
On Tue, Feb 10, 2009 at 08:13:48PM -0500, Sam Hartman wrote:
> >>>>> "Natalie" == Natalie Li <Natalie.Li at Sun.COM> writes:
> Natalie> Thanks Ken!
> Natalie> Ken Raeburn wrote:
> Note that there is also a mechanism to extract authorization data from
> a GSS-API context.
Indeed. We'll have to work that in, probably by extracting the PAC and
associating it with the gss_name_t and then adding more functions along
the lines of gsscred_name_to_unix_cred() (at least as an project private
interface in Solaris for Natalie's purposes).
More information about the krbdev